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TM THE CLAIMS 

1.-23, (cancelled) 

Please add the following new claims: 

25. (new) A method of assessing a financial fraud risk within a distributed 

client/server system, said method comprising: 

receiving first and second financial transactions from transactional information sources at 
a central computer system; 

generating first features for said first financial transaction at said central computer 

system; 

generating second features for said second financial transaction at said central computer 
system; 

determining feature changes between said first features and said second features at said 
central computer system; 

encrypting said feature changes at said central computer system; 

transmitting said encrypted feature changes from said central computer system to a client 
computer system; 

receiving a local, current financial transaction at a client computer system; 
encrypting said current transaction at said client computer system; 

generating local features from said encrypted current transaction at said client computer 
system; 
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comparing said local features to said received feature changes at said client computer 
system; and 

scoring the result of said comparing to produce a fraud risk value associated with said 
local, current financial transaction, whereby the risk associated with said current financial 
transaction is assessed in a distributed manner. 

26. (new) A method as recited in claim 25 wherein said generating said first 
features, generating said second features and said generating local features all include 
incorporating probability information into said first, second and local features. 

27. (new) A method as recited in claim 25 wherein said scoring is performed using a 
risk prediction model. 

28. (new) A method as recited in claim 25 wherein said local, current transaction 
includes at-source data not generally available to said central computer system, 

29. (new) A method as recited in claim 25 wherein said first financial transaction, 
said second financial transaction and said current transaction all relate to the same financial 
account. 

30. (new) A method as recited in claim 25 further comprising: 

generating secondary features for said first financial transaction; 

generating secondary features for said second financial transaction; 

determining secondary feature changes between said secondary features of said first and 
second financial transactions; 



3 



PAGE 5/12 * RCVD AT 1/1012006 2:52:44 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-6/24 * DNIS:2738300 * CSID:612 825 6304 * DURATION (mm-ss):0246 



JAN-1 0-2006 13:55 F ROM-BEYER WEAVER THOMAS 



612-825-6304 



T-136 P. 006/012 F-396 



encrypting said secondary feature changes; and 

transmitting said encrypted secondary feature changes from said central computer system 
to said client computer system, 

3 1 . (new) A method as recited in claim 25, further comprising: 

generating enhanced features as result of said comparing; and 
transmitting said enhanced features to said central computer system. 
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32. (new) A distributed risk assessment system for assessing a financial fraud risk, 

said system comprising: 

a transaction engine that produces first and second financial transactions; 

a prqfiling engine of a central computer system that receives said first and said second 
financial transactions and generates first features and second features of said financial 
transactions respeciively; 

a clustering engine of said central computer system that stores said first features and said 
second features into a cluster database; 

a replication engine of said central computer system that determines feature changes 
between said first features and said second features, and encrypts said feature changes; 

a database of a client computer system that stores said encrypted feature changes; 

a local engine of said client computer system that receives a current transaction, encrypts 
said current transaction, and generates local features from said current transaction, wherein said 
local engine also compares said local features to said encrypted feature changes and scores the 
result to produce a fraud risk value associated with said local, current financial transaction, 
whereby the risk associated with said current financial transaction is assessed in a distributed 
manner. 

33. (new) A system as recited in claim 32 wherein said first features, said second 
features and said local features include probability information. 

34. (new) A system as recited in claim 32 further comprising: 

a risk prediction model of said client computer system used to produce said fraud risk 

value. 
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35. (new) A system as recited in claim 32 wherein said current transaction includes 

at-source data not generally available to said central computer system. 



36. (new) A system as recited in claim 32 wherein said first financial transaction, 

said second financial transaction and said current transaction all relate to the same financial 
account. 



37. (new) A system as recited in claim 32 wherein said clustering engine further 

generates secondary features for said first financial transaction and secondary features for said 
second financial transaction, and wherein said replication engine further determines secondary 
feature changes between said secondary features of said first and second financial transactions, 
and wherein said replication engine further encrypts said secondary feature changes and 
transmits said encrypted secondary feature changes from said central computer system to said 
client computer system. 



38. (new) A system as recited in claim 32 wherein said local engine of said client 

computer system further generates enhanced features as result of said comparing and transmits 
said enhanced features to said central computer system. 
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